v3.0.1

What's Changed

🔧 Fixes

• ci(build): query scorecard image tags with registry v2 api (backport #915) by @mergify in #916
• fix(webhook): make label selectors unambiguous (backport #926) by @mergify in #927
• fix(olm): rename deployment to handle immutable selector (backport #943) by @mergify in #944

⚙️ Maintenance

• chore(release): prepare for 3.0.1 by @andrewazores in #907
• chore(csv): bump csv min k8s version to 1.25 (backport #910) by @mergify in #911
• test(scorecard): preserve CR when retrying on conflict (backport #912) by @mergify in #913
• chore(docs): update doc/config.md to reflect 3.0 changes (backport #922) by @mergify in #929
• build(deps): bump k8s.io/client-go from 0.28.11 to 0.28.13 (backport #931) by @mergify in #940
• chore(scorecard): bump Scorecard image tag (backport #945) by @mergify in #946
• chore(release): set versions for 3.0.1 by @andrewazores in #954

Full Changelog: v3.0.0...v3.0.1

v3.0.0

What's Changed

🚀 Features

• feat(insights): optionally deploy a proxy for Insights by @ebaron in #670
• feat(openshift): add Configuring Cryostat Quickstart by @Josh-Matsuoka in #668
• feat(cert): add cryostat CA cert to target namespaces by @mwangggg in #661
• feat(discovery): options to configure discovery port names and numbers by @tthvo in #715
• feat(deploy): deploy cryostat 3.0 by @Josh-Matsuoka in #727
• feat(auth): deploy openshift auth proxy by @andrewazores in #799
• feat(auth): add configuration for htpasswd basic auth by @andrewazores in #802
• feat(auth): add config option to deploy oauth2_proxy instead of openshift-oauth-proxy by @andrewazores in #803
• feat(ocp): add optional flag to force platform as openshift by @tthvo in #810
• feat(scorecard): allow running scorecard test locally by @tthvo in #821
• feat(status): CR status for database and storage secrets by @tthvo in #825
• feat(cryostat3): deploy Cryostat 3.0 by @andrewazores in #815
• feat(api): add ExternalHost property for routes (backport #877) by @mergify in #878

🔧 Fixes

• ci(controller-test): remove manual cache actions by @tthvo in #646
• fix(insights): add port to INSIGHTS_PROXY by @ebaron in #674
• fix(insights): set User-Agent header for UHC Auth Proxy by @ebaron in #677
• fix(openshift): update Quickstart text/formatting by @ebaron in #688
• fix(build-ci): fix scorecard image tag returned as null by @tthvo in #760
• fix(discovery): correct k8s API discovery configuration by @andrewazores in #804
• fix(csv): add related images for storage and db by @ebaron in #812
• fix(reports): update deprecated quarkus properties by @mwangggg in #818
• fix(reports): update deprecated quarkus properties (backport #818) by @mergify in #819
• test(scorecard): fix broken scorecard tests for 3.0 by @tthvo in #820
• fix(secret): database should use user-defined secret if specified by @tthvo in #827
• fix(proxy): do not pass unused credentials upstream by @andrewazores in #839
• fix(scorecard): error when constructing request should be checked by @tthvo in #843
• fix(crd): restrict database secret name to be immutable by @tthvo in #831
• fix(grafana): use relative dashboard path (backport #874) by @mergify in #876
• fix(tls): detect modified CA and reissue certs (backport #897) by @mergify in #898

⚙️ Maintenance

• build(release): prepare for cryostat 2.4.0 release by @andrewazores in #642
• build(deps): bump golang.org/x/net from 0.8.0 to 0.17.0 by @dependabot in #643
• ci(dependabot): configure dependabot updates by @tthvo in #648
• build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in #654
• build(deps): bump k8s.io/client-go from 0.26.8 to 0.26.10 by @dependabot in #658
• ci(dependabot): remove reviewers config by @aali309 in #666
• build(deps): bump sigs.k8s.io/controller-runtime from 0.14.6 to 0.14.7 by @dependabot in #662
• build(deps): bump github.com/go-logr/logr from 1.2.4 to 1.3.0 by @dependabot in #664
• ci(status): add status check for tests by @mwangggg in #684
• chore(makefile): use CLUSTER_CLIENT instead of oc by @tthvo in #676
• chore(makefile): option to generate bundles with quickstart on ocp by @tthvo in #687
• ci(release-notes): replace release-drafter with release labels config by @andrewazores in #695
• ci(release-notes): remove missed action config in #695 by @andrewazores in #697
• fix(CI): add comment when /build_test is finished by @mwangggg in #745
• feat(scorecard): add ability to select scorecard tests by @mwangggg in #746
• feat(scorecard): add ability to select scorecard tests (backport #746) by @mergify in #747
• fix(CI): add comment when /build_test is finished (backport #745) by @mergify in #748
• chore(api): remove MaxWsConnections by @mwangggg in #742
• test(scorecard): scorecard tests for recording management by @tthvo in #698
• test(scorecard): scorecard tests for recording management (backport #698) by @mergify in #752
• test(scorecard): scorecard test for Cryostat CR configuration changes by @mwangggg in #739
• test(scorecard): scorecard test for Cryostat CR configuration changes (backport #739) by @mergify in #756
• chore(api): remove CommandConfig from NetworkOptions by @mwangggg in #743
• test(scorecard): scorecard test for report generator by @mwangggg in #753
• test(scorecard): scorecard test for report generator (backport #753) by @mergify in #767
• fix(build-ci): fix scorecard image tag returned as null (backport #760) by @mergify in #768
• chore(api): remove minimal option from CR spec by @tthvo in #751
• test(scorecard): add container logs to scorecard results by @tthvo in #758
• test(scorecard): add container logs to scorecard results (backport #758) by @mergify in #770
• fix(CI): add permission to publish comment when ci fails by @mwangggg in #769
• fix(CI): add permission to publish comment when ci fails (backport #769) by @mergify in #771
• build(go): update Golang to 1.21 by @ebaron in #777
• build(go): update Golang to 1.21 (backport #777) by @mergify in #778
• test(scorecard): logWorkloadEvent for cryostat-recording errors by @mwangggg in #759
• chore(version): bump version to 3.0.0-dev by @ebaron in #781
• test(scorecard): fix rebasing skipped commit (backport #780) by @mergify in #782
• ci(branch): run push workflows on cryostat3 branch by @ebaron in #786
• ci(branch): run push workflows on cryostat3 branch (backport #786) by @mergify in #787
• test(scorecard): multi-namespace scorecard test by @mwangggg in #763
• test(scorecard): multi-namespace scorecard test for 3.0 by @mwangggg in #773
• test(scorecard): add container logs for report sidecard test by @tthvo in #772
• test(scorecard): add container logs for report sidecard test (backport #772) by @mergify in #796
• test(scorecard): retry on cryostat update conflict by @mwangggg in #774
• test(scorecard): retry on cryostat update conflict (backport #774) by @mergify in #797
• build(insights): consume out-of-tree Insights module by @ebaron in #800
• c...

v2.4.0

What's Changed

🚀 Features

• feat(ci): setup CI to push scorecard, bundle images and run scorecard by @tthvo in #588
• feat(ci): clean up test images after closing PRs by @aali309 in #609
• feat(scorecard): add psa labels for scorecard namespace by @tthvo in #621
• feat(openshift): custom extra labels/annotations on deployments/pods by @OpenGuidou in #632
• feat(ci): replaced GHCR_PR_TOKEN with GITHUB_TOKEN by @aali309 in #635
• feat(insights): optionally deploy a proxy for Insights (backport #670) by @mergify in #673
• feat(openshift): add Configuring Cryostat Quickstart (backport #668) by @mergify in #686

🔧 Fixes

• fix(csv): use Cryostat CR as initialization resource by @ebaron in #563
• fix(deploy): lower default Grafana CPU request by @ebaron in #566
• fix(rbac): re-create role bindings when roleRefs change by @ebaron in #571
• fix(crd): remove mentions of JMX in credential database by @tthvo in #575
• fix(rbac): bypass cache when reading RoleBindings by @ebaron in #581
• fix(ci): new scorecard tag should trigger CI builds by @tthvo in #592
• fix(cleanup): allow deletion to proceed without config map by @ebaron in #593
• fix(ci): ci should checkout correct ref by @tthvo in #597
• ci(scorecard): fix missing image tags by @tthvo in #615
• fix(network): app & component labels for network objects by @mwangggg in #608
• fix(makefile): fix ignore-not-found is not defined by @tthvo in #640
• fix(insights): add port to INSIGHTS_PROXY (backport #674) by @mergify in #675
• fix(insights): set User-Agent header for UHC Auth Proxy (backport #677) by @mergify in #678
• fix(openshift): update Quickstart text/formatting (backport #688) by @mergify in #690

📄 Documentation

• docs(readme): build-ci and test-ci-push badges by @733amir in #633

⚙️ Maintenance

• build(config): update makefile and mergify for 2.3 release by @tthvo in #555
• test(scorecard): clean up CR after test finishes by @ebaron in #557
• test(scorecard): log workload conditions/events upon failure by @ebaron in #560
• build(go): upgrade to Golang 1.20 by @ebaron in #569
• feat(sample): add quarkus-test-agent sample app by @andrewazores in #578
• test(scorecard): enable scorecard on k8s by @tthvo in #589
• chore(scorecard): bump Scorecard image tag by @ebaron in #591
• chore(samples): create sample apps from manifests by @tthvo in #590
• chore(oauth): remove modifications to OpenShift api-server by @tthvo in #599
• chore(license): relicense project to Apache-2.0 by @andrewazores in #601
• ci(multiarch): build multiarch OCI manifest images by @andrewazores in #602
• build(multiarch): produce multiarch scorecard test image by @andrewazores in #605
• chore(scorecard): bump Scorecard tag to trigger arm64 build by @ebaron in #606
• build(scorecard): update multiarch build steps by @tthvo in #610
• ci(scorecard): clean up images for both push and pr ci by @tthvo in #620
• build(cert-manager): upgrade cert-manager version by @tthvo in #622
• chore(deployment): adjust resource requests by @andrewazores in #617
• chore(ci): PR command build_test by @mwangggg in #619
• chore(build): upgrade Operator SDK to v1.31.0 by @aali309 in #629
• feat(ci): update github actions to node 16 by @aali309 in #639
• chore(build): add short summaries to targets by @andrewazores in #637
• feat(ci): updated release-drafter by @aali309 in #641
• build(deps): bump golang.org/x/net from 0.8.0 to 0.17.0 (backport #643) by @mergify in #647
• build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (backport #654) by @mergify in #655
• chore(versions): use release branch image tags by @ebaron in #663
• build(deps): bump sigs.k8s.io/controller-runtime from 0.14.6 to 0.14.7 (backport #662) by @mergify in #671
• build(deps): bump github.com/go-logr/logr from 1.2.4 to 1.3.0 (backport #664) by @mergify in #672
• test(insights): change version for test by @ebaron in #679
• chore(makefile): option to generate bundles with quickstart on ocp (backport #687) by @mergify in #689
• chore(release): prepare 2.4.0 release by @andrewazores in #693

Others

• build(deps): bump k8s.io/client-go from 0.26.8 to 0.26.10 (backport #658) by @mergify in #659
• ci(release-notes): replace release-drafter with release labels config (backport #695) by @mergify in #696

New Contributors

• @733amir made their first contribution in #633
• @OpenGuidou made their first contribution in #632

Full Changelog: v2.3.1...v2.4.0

v2.3.1

What's Changed

• chore(release): update versions for 2.3.1 development by @andrewazores in #587
• fix(cleanup): allow deletion to proceed without config map (backport #593) by @mergify in #594
• chore(oauth): remove modifications to OpenShift api-server (backport #599) by @mergify in #600
• chore(release): Update versions for 2.3.1 release by @mwangggg in #624

New Contributors

• @mwangggg made their first contribution in #624

Full Changelog: v2.3.0...v2.3.1

v2.3.0

Contributors

@andrewazores, @dependabot, @dependabot[bot], @ebaron, @jaadbarg, @maxcao13 and @tthvo

What's Changed

Features

• feat(cert): Delete Grafana certificate and secret when in minimal mode (#508) @jaadbarg
• feat(csv): enable AllNamespaces install mode (#514) @ebaron
• feat(api): add multi-namespace ClusterCryostat API (#520) @ebaron

Fixes

• fix(rbac): bypass cache when reading RoleBindings (#581) @ebaron
• fix(crd): remove mentions of JMX in credential database (#575) @tthvo
• fix(rbac): re-create role bindings when roleRefs change (#571) @ebaron
• fix(deploy): lower default Grafana CPU request (#566) @ebaron
• fix(csv): use Cryostat CR as initialization resource (#563) @ebaron
• fix(env): rename reports sidecar env var (#552) @andrewazores
• fix(api): add multi-tenancy warning to description (#546) @ebaron
• fix(api): prevent overwriting objects when names conflict (#545) @ebaron
• build(make): update Makefile targets to support ClusterCryostat (#541) @ebaron
• fix(discovery): look up API resources individually (#530) @ebaron

Documentation

• docs(api): document ClusterCryostat API (#544) @ebaron

Maintenance

• feat(sample): add quarkus-test-agent sample app (#578) @andrewazores
• build(go): upgrade to Golang 1.20 (#569) @ebaron
• test(scorecard): log workload conditions/events upon failure (#560) @ebaron
• test(scorecard): clean up CR after test finishes (#557) @ebaron
• build(config): update makefile and mergify for 2.3 release (#555) @tthvo
• chore(github): add pr and issue templates (#554) @maxcao13
• test(scorecard): add option to install cert-manager on OpenShift (#550) @ebaron
• build(deps): upgrade dependencies (#549) @ebaron
• build(operator-sdk): upgrade operator sdk version to 1.28.0 (#543) @tthvo
• test(scorecard): add Scorecard test for Cryostat install (#540) @ebaron
• build(deps): bump golang.org/x/net from 0.0.0-20220127200216-cd36cc0744dd to 0.7.0 (#534) @dependabot
• build(deps): bump golang.org/x/crypto from 0.0.0-20220214200702-86341886e292 to 0.1.0 (#531) @dependabot
• chore(controllers): rename controller files to be shared (#519) @ebaron
• build(deps): replace go-restful with newer version (#526) @ebaron
• chore(api): capitalize JMX credentials DB display name (#518) @tthvo
• test(reconcile): simulate controllers with custom client (#510) @ebaron

v2.2.1

What's Changed

• build(version): update versions for 2.2.1-dev by @ebaron in #498
• fix(deploy): use recreate strategy and 1 replica (backport #499) by @mergify in #500
• build(version): set versions for 2.2.1 release by @ebaron in #511

Full Changelog: v2.2.0...v2.2.1

v2.2.0

Contributors

@andrewazores, @ebaron, @jaadbarg, @maxcao13 and @tthvo

Features

• feat(discovery): allow configurations for discovery service (#474) @tthvo
• feat(openshift): update existing console links (#467) @ebaron
• feat(secrets): update operator-controlled secrets (#466) @ebaron
• feat(pvc): update existing PVCs (#462) @ebaron
• feat(config): Add options to control scheduling on nodes (#441) @jaadbarg
• feat(rbac): update operator-controlled RBAC objects (#458) @ebaron
• feat(security): security contexts are now configurable (#457) @tthvo
• feat(auth-properties): allow users to specific cryostat permission mappings (#440) @tthvo
• feat(crd): add reference to Grafana secret in Cryostat CR (#432) @maxcao13
• feat(labels): allow users to define labels/annotations for routes (#425) @tthvo
• feat(network): update operator-controlled networking objects (#424) @ebaron
• feat(license): add license header checking script (#422) @tthvo

Fixes

• fix(resources): set cryostat container resource request defaults (#437) @tthvo
• fix(deploy): recreate deployment if selector changed (#472) @ebaron
• fix(watches): update object types watched by controller (#468) @ebaron
• fix(reports): fix panic in reports scheduling (#470) @ebaron
• fix(security): support restricted pod security standard (#450) @ebaron
• fix(makefile): use ignore-not-found flag when deleting resources (#453) @tthvo
• fix(reports): add nil-check and remove side effects (#449) @ebaron
• fix(gitignore): ignore bundle tmp directory from catalog build (#443) @tthvo
• fix(apis): remove deprecated flightrecorder/recording apis (#438) @tthvo
• fix(auth-properties): update docs links and add missing custom cluster-role in tests (#442) @tthvo
• build(operator-sdk): upgrade operator sdk version to 1.22.2 (#430) @tthvo
• fix(resources): add resource limits/requests for operator deployment (#423) @tthvo
• fix(crd): fix missing spec descriptor for flightRecorder (#421) @tthvo

Documentation

• docs(resources): document default resource requests (#478) @tthvo
• docs(scheduling): document scheduling options (#469) @ebaron
• fix(auth-properties): update docs links and add missing custom cluster-role in tests (#442) @tthvo
• docs(network): NetworkConfiguration is not Ingress-specific (#429) @ebaron
• docs(auth): update service account secret name (#427) @tthvo

Maintenance

• build(scorecard): use date for scorecard tag (#489) @ebaron
• test(sample): update sample apps (#486) @andrewazores
• build(csv): update link in CSV description (#482) @ebaron
• ci(mergify): update for 2.2.0 release point (#479) @andrewazores
• chore(icon): update icon (#477) @andrewazores
• build(olm): move capability level to Seamless Upgrades (#473) @ebaron
• chore(samples): update sample app definitions (#460) @andrewazores
• test(scorecard): add scorecard test for operator availability (#445) @ebaron
• build(deps): update OpenShift and cert-manager (#435) @ebaron

v2.1.1

Fixes

• fix(health): use /health/liveness for probes (backport #401) by @ebaron in #402

Maintenance

• build(deps): update gopkg.in/yaml.v3 to 3.0.1 (backport #398) by @ebaron in #400
• build(version): set versions for 2.1.1 release by @ebaron in #418

Full Changelog: v2.1.0...v2.1.1

v2.1.0

Contributors

@andrewazores, @divyakelaskar, @ebaron, @jaadbarg, @jan-law and @jiekang

Features

• feat(reports): configure TLS for reports service (#365) @ebaron
• feat(resources): Add Resource Config for Main Deployment (#344) @jaadbarg
• feat(storage): add EmptyDir storage option (#355) @jan-law
• feat(conditions): provide status information using conditions (#336) @ebaron
• feat(env): Make selected env vars configurable (#335) @jan-law
• feat(cryostat): implement sidecar report config (#325) @andrewazores
• feat(printer-column): Printer Column for Application URL (#333) @jaadbarg
• feat(config): Add cryostat origin to APIServer CORS allowed origins (#322) @jan-law
• feat(auth): Add logout permissions to service account (#319) @jan-law
• feat(auth): Add OAuth client to service account (#292) @jan-law
• feat(api): add service customization to CRD (#313) @ebaron
• feat(deploy): use Always pull policy for development images (#286) @ebaron

Fixes

• fix(sa): update existing service account (#383) @ebaron
• fix(cert-secrets): mount user certs when cert-manager disabled (#376) @ebaron
• fix(olm): hide networkOptions.commandConfig in UI (#374) @ebaron
• fix(tls): update existing certificates (#360) @ebaron
• build(golang): update to Golang 1.17 (#362) @ebaron
• fix(grafana): use loopback alias for Grafana health check (#352) @ebaron
• fix(api): deprecate FlightRecorder and Recording CRDs (#356) @ebaron
• fix(WebSocket): Update ws limit (#348) @jan-law
• fix(jdp): disable JDP autodiscovery (#345) @ebaron
• fix(reports): fix OLM descriptor for report resources (#343) @ebaron
• fix(command): remove 'LISTEN' env vars (#308) @jaadbarg
• fix(printer-column): add printer column to CSV (#334) @ebaron
• fix(makefile): Deploy bundle with BUNDLE_IMG (#321) @jan-law
• build(deps): update dgrijalva/jwt-go to patched version (#324) @ebaron
• fix(deploy): mount probe template directory (#318) @ebaron
• fix(deploy): set CRYOSTAT_SSL_PROXIED only for TLS ingress/route (#295) @ebaron
• fix(auth): Encode auth bearer token (#291) @jan-law
• fix(cert-manager): Upgrade cert-manager to v1.5.3 (#288) @jan-law

Documentation

• docs(config): add resource requirements to config guide (#378) @ebaron
• docs(crd): minimal mode includes web client (#377) @ebaron
• docs(storage): fix EmptyDir option example (#358) @jan-law
• fix(WebSocket): Update ws limit (#348) @jan-law
• docs(authentication): Update web-client login info (#331) @jan-law
• docs(ingress): Remove unneeded ingress timeouts (#329) @jan-law
• docs(readme): add see also section to README (#316) @jiekang
• docs(about): Match operatorHub naming convention (#314) @jan-law
• fix(ingress): Recommend Ingress timeout as 3600s (#312) @jan-law
• docs(ingress): Add link to ingress docs (#305) @jan-law
• docs(cert-manager): Add cert-manager docs to CSV (#300) @jan-law

Maintenance

• build(version): bump version to 2.2.0-dev (#393) @ebaron
• ci(env): rename environment variable for operator image (#390) @ebaron
• refactor(makefile): Rename the IMG env var to OPERATOR_IMG (#386) @divyakelaskar
• build(deps): update gogo/protobuf to 1.3.2 (#369) @ebaron
• chore(resources): update AUTH_MANAGER env var value for moved package (#364) @andrewazores
• ci(release): update CI for cryostat-v2.1 branch (#366) @ebaron

v2.0.0

Contributors

@andrewazores and @ebaron

Features

• feat(tls): emit event when cert-manager is missing (#246) @ebaron
• feat(tls): add cert-manager toggle to Cryostat CRD (#241) @ebaron
• feat(api): mount templates stored in config maps (#237) @ebaron
• feat(security): create reduced permissions ServiceAccount for Cryostat (#229) @ebaron

Fixes

• fix(openshift): correct annotation for topology view (#267) @ebaron
• fix(templates): templates should be mounted if TLS disabled (#262) @ebaron
• fix(crd): fix OLM descriptors and documentation (#260) @ebaron
• fix(health): use /health for Cryostat health check (#261) @ebaron
• fix(finalizer): remove finalizers when objects to delete not found (#258) @ebaron
• fix(pvc): derive fsGroup from SCC annotation (#252) @ebaron
• fix(pvc): set fsGroup to ensure mounts writable (#244) @ebaron
• fix(rbac): add permissions to support tree API (#235) @ebaron
• fix(openshift): ensure ConsoleLink is not duplicated (#230) @ebaron
• Update mounted directories/paths for latest Cryostat upstream (#211) @andrewazores

Documentation

• Add a badge to README for Google Group (#208) @ebaron

Maintenance

• build(version): release version 2.0.0 (#284) @ebaron
• build(versions): update Grafana images to 2.0.0 (#282) @ebaron
• fix(openshift): force platform/auth on OpenShift (#274) @ebaron
• build(csv): add Cryostat icon in CSV (#271) @ebaron
• build(csv): add initialization-resource annotation (#268) @ebaron
• ci(release-drafter): revert branches to only main (#233) @ebaron
• ci(quay): apply latest tag only in main (#231) @ebaron
• chore(version): fix CSV metadata for 2.0.0-dev (#225) @ebaron
• ci(quay): push CI builds to Quay (#219) @ebaron
• ci(dependent-issues): enable dependent-issues action (#218) @ebaron
• ci(release-drafter): generate release notes drafts (#217) @ebaron
• ci(semantic-pr): add semantic-pull-request job (#216) @ebaron
• ci(mergify): add mergify config for backports (#215) @ebaron
• chore(images): update image versions to latest development builds (#212) @ebaron
• Set KUSTOMIZE_VERSION in variable (#202) @andrewazores